Emory University Suspends Students Over AI Study Tool The School Gave Them $10k To Build And Promoted

from the um-guys? dept

I’ll admit, I had to read this story a couple of times, since it’s so unbelievable. With the explosion of AI tools that have come out over the past couple of years, coming along for the ride are all kinds of concerns over how that AI gets used. In the realm of higher education, this means a great deal of consternation over concerns about students using these tools to cheat. While these concerns sure seem wildly overblown, the flipside of this issue has been the use of all kinds of software tools billed as “anti-cheating” programs for schools to use to make sure students are student-ing legitimately.

But, man, whatever the hell is going on with the folks at Emory University is simply bizarre. A group of students are suing the school after being suspended for a year over an AI program they built called “Eightball,” which is designed to automagically review course study material within the school’s software where professors place those study materials and develop flashcards, study materials for review, and the like. The only problem is that the school not only knew all about Eightball, it paid these same students $10,000 to make it.

Last spring, the students presented Eightball at the university’s “Entrepreneurship Summit” and were given a $10,000 grand prize to build and launch their software, which allowed students to upload PDFs of course readings, syllabuses, and other material and turn those into practice tests and flash cards. They also explained that they were eventually going to allow users to connect to Canvas, which is a software platform used by the university where professors upload course readings, documentation, assignments, etc, the lawsuit alleges. “By connecting Eightball to Canvas, students would be able to import their course materials to Eightball all at once rather than uploading the same documents individually.”

“Eightball is a platform kind of like ChatGPT but trained directly on your Canvas courses. The way Eightball works is it connects to your Canvas and goes through each of your courses. And for each course it studies the modules, the lectures, the slides, the readings, everything. From there, it becomes a ChatGPT-like experience, but the AI is customized for your course,” one of the creators explains in a demo video. The student then shows that Eightball surfaces directly relevant passages and serves as, more or less, a search-engine for class material.

The school actually did much more than just fund Eightball’s creation. It promoted the tool on its website. It announced how awesome the tool is on LinkedIn. Emails from faculty at Emory showered the creators of Eightball with all kinds of praise, including from the Associate Dean of the school. Everything was great, all of this was above-board, and it seemed that these Emory students were well on their way to doing something special, with the backing of the university.

Then the school’s IT and Honor Council got involved.

It is not clear, exactly, what changed at Emory that made the university take action against a startup that it went out of its way to promote, but both the lawsuit and the Honor Council writeup asserts that the university’s IT department was angry that the company allowed students to connect their own Canvas API tokens to the app. In the lawsuit, the students’ lawyers write that the university changed the settings within Canvas and “hid the button that generates Canvas [API] tokens, but it did not inform [the students] that the change was in response to Eightball’s newly available method for uploading course materials.” Soon after this, “Emory informed [one of the students] that he may have violated Emory’s Undergraduate Code of Conduct by Connecting Eightball to Canvas.” The students shut Eightball down at this point.

After all of this promotion, the university’s Honor Council launched an investigation into the students and Eightball. This investigation, which can be read here, found that Eightball had not been used for cheating, and that the students had not lied about the capabilities of the software. It also did not dispute that the school both funded and championed the software. The council recommended that the students be suspended for a year, anyway. Jason Ciejka, the director of the school’s honor council, wrote “this case is unprecedented in terms of its scale and potential to harm the Emory community.” 

Read that second paragraph again. The school funded the creation of this tool made by its own students, praised those students and promoted the use of the tool, validated that it had not been used for any cheating (because it can’t be used to cheat, more on that later), and then suspended the students for a year anyway. That’s insane.

And all of this consternation over using an API token by students is equally silly. The school suggested this was some kind of IT security risk for students to use them to connect Canvas to Eightball. What the school appears to be missing is that, you know, that’s precisely what APIs are for.

The school “figured out that the Eightball program accesses the Canvas data through the Canvas user generated token, which is essentially users’ Emory credentials that give full access to everything users can access on Canvas. This user generated token is considered a highly restricted user credential tool and sharing it to any outside party is a violation of Canvas terms and IT policies.” API tokens are sensitive, but API tokens exist exclusively for users to connect accounts to outside services—what the Honor Council is describing is essentially the only use for an API token, and is a feature of Canvas which the Honor Council wrote “is not something that they can turn off.” Canvas’s own documentation explains to students how they can use use API tokens to connect their accounts to other apps: “Access tokens provide access to canvas resources through the Canvas API. Access tokens can be generated automatically for third-party applications or created manually.”

The Honor Council, however, seemed to be hyper-focused on cheating, still. While it confirmed no cheating had taken place, it still recommended suspension due to how Eightball could be used for cheating. Except no, no it cannot. That isn’t what the platform does at all. The only information Eightball can supply the student with is the information that is in the course material supplied by the professors themselves.

According to Eightball’s marketing, the lawsuit, and Emory University’s own writeups, Eightball was not actually a cheating tool. As far as AI-tools go, it seems innocuous, and the university did not provide any examples of the tool ever being used for cheating. “Unless answers are directly in the course materials, Eightball cannot make up anything for non-existing answers.”

You can read the lawsuit from the students embedded below, but I can’t for the life of me imagine a scenario in which the court doesn’t laugh Emory University out of the courtroom and order it to return these students to their classes.

Filed Under: , , ,
Companies: emory university

Rate this comment as insightful
Rate this comment as funny
You have rated this comment as insightful
You have rated this comment as funny
Flag this comment as abusive/trolling/spam
You have flagged this comment
The first word has already been claimed
The last word has already been claimed
Insightful Lightbulb icon Funny Laughing icon Abusive/trolling/spam Flag icon Insightful badge Lightbulb icon Funny badge Laughing icon Comments icon

Comments on “Emory University Suspends Students Over AI Study Tool The School Gave Them $10k To Build And Promoted”

Subscribe: RSS Leave a comment
40 Comments
hij (profile) says:

Sad But Should Have Been Expected

When graphical calculators first became available mathematics faculty dirtied their collective pants while hyperventilating that students being able to see crude graphs and make some easier calculations was somehow going to destroy students’ ability to learn mathematics. Some faculty members still have not gotten over it despite decades of evidence that their fears are simply not based in reality. The only difference between what is happening with AI and graphing calculators is that it involves the whole of the university. The baseless fears about AI is nothing more than real stupidity.

Mamba (profile) says:

Re:

The only concerns I ever saw about graphing calculators was the ability to store information in them, and cheat that way. Or, there’s a notorious story about students building a communication card for the HP48G series, and using that to cheat. Not sure how true that was.

Frankly, I didn’t get much value out of them myself. Once I discovered MathCAD, I never used them for homework….and any tests of sufficient complexity to benefit from it were going to be long as hell cover any significant amount of content. As a results, starting in my 300 level courses, most my profs moved over to takehome / open book. They were grueling and long as fuck. But you learned a lot, and usually got As.

Anonymous Coward says:

Re: Re:

The only concerns I ever saw about graphing calculators was the ability to store information in them, and cheat that way.

The general way to fix that, for those who don’t know, is to let people bring information, so that it’s not “cheating” (and isn’t so unfair to people bad at rote memorization—is the ability to “cram” really a useful thing to test for, anyway?).

Mamba (profile) says:

Re: Re: Re:

Oh yeah, I agree. My EMag Prof was a complete douche canoe, and limited us to a 3×5 card. In electromagnetic, easily one of the most complex topics in electrical engineering.

He also spent the first 1/3 of the class teaching vector transformations exclusively, and the rest of the covering fuck-all from his “in progress” text book.

I learned absolutely nothing in that class. I had to re-learn it when I did my machines courses….

The idea that I have to remember complex shit to do my job, and therefore I shouldn’t have references during a test, is belied by the fact I have a bookshelf. and the internet. In my professional career I’ve discovered relying on my, or others, memories is a quick path to failure. I look up the tap rule every fucking time I use it, as it covers a number of exceptions that are really fucking specific…and if you fuck them up you don’t get your permit.

Anonymous Coward says:

Re:

Former lecturer here. The reason I didn’t allow my students to use graphical calculators in exams is because that would give students a choice to either buy one (for about £120), or suffer a (small) disadvantage relative to other students. This would be unfair for students who couldn’t afford one, and a waste of money for students who could.

This comment has been flagged by the community. Click here to show it.

Anonymous Coward says:

Re: Re:

I empathize with this comment, because I’ve taught classes with a great deal of (economic and other) diversity among the students, and really wanted to create a level playing field for them.

My approach was to use a mix of testing methods: some open-book, some closed. Some with calculators, some not. Some solo, some collaborative. Each of these maps to a different real-world scenario that students may one day find themselves in, so I think it’s good that they learn how to function in each one of them.

I didn’t concern myself too much with cheating: it’s my view that good test design alleviates some, maybe much, of the motivation for cheating. I would rather invest effort in that than in trying to detect cheating after the fact, and I would rather motivate students to do well than motivate them to cheat.

Mamba (profile) says:

Re: Re:

While I’m understand the premise, and at the highschool and below it makes sense, at the collegiate level it seems to be a bit moot at this point. The costs of school have so dramatically risen that the price of a middling calculator that can be used for multiple classes is about the same (or less) cost than the text book.

But again, I’d rather have a laptop and MathCAD. Smath was looking cool, but there’s no way in fuck I’d install closed source Russian software on my dishwasher…let alone computer.

Blockpad looks cool, tho. And while it does have a cloud based Web app, it also has an honest to god windows app.

That Anonymous Coward (profile) says:

“this case is unprecedented in terms of its scale and potential to harm the Emory community.”

And we went full throttle to make sure we shot ourselves in the dick as fast as possible.

Anyone want to bet that the IT department will be reverse engineering the software so the school can sell the flash cards to students?

Its AI is must be illegal and wrong, even if we championed its development & funded it.
HOW DARE YOU HELP OTHER STUDENTS!!!!!!!!
GET OUT!

This is going to end poorly because they’ve now made it a crime at the school to use the API access they provide.

Mamba (profile) says:

Did nobody in the legal department review the decision to suspend the team, or are they as fucking stupid as the IT department and the Honour Council?

If this story gets broader coverage, it’s going to torpedo the recruitment to the engineering and CS departments….at a minimum. They’ll fill all the spots, but with significantly lower caliber students.

This comment has been flagged by the community. Click here to show it.

Anonymous Coward says:

Re:

If this story gets broader coverage, it’s going to torpedo the recruitment to the engineering and CS departments….at a minimum. They’ll fill all the spots, but with significantly lower caliber students.

Oh please, Sambo. They’ll probably be able to recruit a higher calibre of student after ejecting these deadweight reprobates.

This comment has been flagged by the community. Click here to show it.

Kevin P. Neal (profile) says:

They're doing tokens wrong.

Done correctly, tokens have expirations built in to them that cannot be changed except by making a new token. An expired token cannot be used.

Also, tokens can be tied to specific services or, minimally, certain IP addresses. Assuming that Eightball wasn’t running on random people’s computers/phones, the IP block used by Eightball should have been blockable when used with tokens that weren’t allowed to use Eightball. Heck, even without tokens those IP addresses should be blockable if a blanket ban was wanted!

Tokens can be extended such that new tokens have restrictions that old tokens don’t have. With expirations built into tokens the old tokens without the restrictions over time become a non-issue.

This whole affair sounds like an example of punishing people when they should instead be fixing their broken system or switching to one that isn’t broken.

Anonymous Coward says:

Re:

It sounded like a third party tool that they have no control over or really knowledge of.

https://www.instructure.com/canvas

https://community.canvaslms.com/t5/Student-Guide/How-do-I-manage-API-access-tokens-as-a-student/ta-p/273

The token was also expressly a USER token with permissions limited to doing what a student could access. Aka read info provided specifically for them to read.

So you have:
1. A limited access token that had to be generated by a student.
2. Being used exactly for what it was designed to do which is to grant a third party tool access to the service as the student who created the token.
3. With read only permissions on data accessible by that student.

So the students were suspended for using something for its intended purpose.

Rocky says:

Re: Re:

So the students were suspended for using something for its intended purpose.

Well there is intended purpose and “intended purpose”, the latter decided by IT-department tin-pot dictators who failed upwards and who will almost literally shit on you if you do something they don’t like, especially if you do something that shows how out of touch they are with current and new technology.

Think BOFH, but stupid.

MrWilson (profile) says:

this user generated token is considered a highly restricted user credential tool and sharing it to any outside party is a violation of Canvas terms and IT policies.

I wonder if this was the actual origin of the issue, that the IT department initially let the students use the API outside of their existing license terms with the Canvas LMS and Canvas reps contacted the school wanting more money, so Emory shut it down because they didn’t want to expand the license or get sued and they wanted to pin it on the students.

Anonymous Coward says:

Re:

They have an entire guide for a student to generate a token for use in third party tools. They have a guide for what a third party tool can do on behalf of a user.

So.. that logic doesn’t make sense. The only thing I can think of that would make sense is that they gave the students an admin api token that they shouldn’t have but that doesn’t sound like the case either. But without more details on this what I currently see doesn’t support the idea that the students app was in violation of any canvas policies or terms.

https://www.instructure.com/policies/canvas-api-policy

https://community.canvaslms.com/t5/Student-Guide/How-do-I-manage-API-access-tokens-as-a-student/ta-p/273

“You can manage API access tokens from your User Settings. Access tokens provide access to Canvas resources through the Canvas API. Access tokens can be generated automatically for third-party applications or created manually.

Using the Canvas API allows the access token holder to access the same Canvas resources that you can access. For example, third-party applications, including devices you have used to open the Canvas Student app, are authorized to access Canvas on your behalf. For more information on using the Canvas API, view the Canvas API documentation.

MrWilson (profile) says:

Re: Re:

The guide and the policy may be separate from licensing terms for the institution which may limit how Emory was licensed to use it. LMS contracts and service-level agreements can vary from institution to institution depending on size, budget, and license package.

But another possibility is in the API policy page about rate limiting. It’s possible the student software was hitting Canvas’ servers too hard.

Anonymous Coward says:

Re: Re: Re:

That could be.

They shouldn’t have access to a feature they are locked out of though

Even if the policy was violated that isn’t something you punish people for a year over.

What the story should be in that case is :

Sorry for that, a new app was built and wanted to use that. We asked them to disable it. Pay cost of minor extra use.

Look into plans to enable it long term.

A year suspension though is more than rapists get in many cases.

MrWilson (profile) says:

Re: Re: Re:2

Even if the policy was violated that isn’t something you punish people for a year over.

Absolutely. I’m just speculating as to the origin of the issue. The reaction by Emory is definitely disproportionate and even absurd. If it was a policy violation by the students, it was apparently done with the university’s blessing and technical support initially, so there should be no liability for the students. It even sounds like some of them might want to drop out and look for funding for a software startup.

Anonymous Coward says:

Re: Re: Re:

I hope that is the issue – as that makes their actions way worse.

Accusing students of academic dishonesty and suspending them because the college was trying to paper over approving a licensing violation is going to go way worse than actually having genuine issues over academic honesty concerns.

That One Guy (profile) says:

Few things harm a community like a dagger to the back

The council recommended that the students be suspended for a year, anyway. Jason Ciejka, the director of the school’s honor council, wrote “this case is unprecedented in terms of its scale and potential to harm the Emory community.”

…Which as it happens out was absolutely correct, it just turns out that all the harm to the Emory community was caused by them, as the current student body and any future students just saw students going from being praised by the school for creating a project that the school paid them to create to being suspended for doing so, gutting any trust those students might have had towards the staff and ‘honor council’ and/or expectation of fairness or sanity from them.

Rich says:

Motives.

This stinks of panic and ulterior motives.
First, students connect a language modeling AI with the ability to digest all the materials, data, and documents it can find.
Second, students demonstrate the effectiveness of this AI’s ability to answer summarize, and (seemingly) understand all of this material.
Third, the IT department catches wind of what these kids are doing. The IT department, who would probably have a good idea of what documents and other information might be floating around on their network services, and also might have a bit more insight into what an AI with no concept of “knowing when to keep your mouth shut”.
And finally, the IT department, whose role in disciplinary issues should never go beyond contributing to policy, explaining the nature of any possible offenses, alerting the “chain of command” about any detected violations, and/or providing evidence regarding any potential violations, are now suddenly demanding disciplinary action.

It’s hard not to find oneself wondering exactly what the IT department fears this AI might produce, so much so that the School feels that they need a full year to clean it up.

-r

Christenson says:

Re: Dirty Documents

So, what’s your best guess as to the what that the IT department was a afraid might get surfaced via a thorough but accidental search of the on-line course material through an easter egg??

There was this weird bit about making course material public, whereas most profs would like more people to read the material.

I’m thinking there’s a CSAM backdoor or easter egg somewhere…other ideas?

Add Your Comment

Your email address will not be published. Required fields are marked *

Have a Techdirt Account? Sign in now. Want one? Register here

Comment Options:

Make this the or (get credits or sign in to see balance) what's this?

What's this?

Techdirt community members with Techdirt Credits can spotlight a comment as either the "First Word" or "Last Word" on a particular comment thread. Credits can be purchased at the Techdirt Insider Shop »

Follow Techdirt

Techdirt Daily Newsletter

Ctrl-Alt-Speech

A weekly news podcast from
Mike Masnick & Ben Whitelaw

Subscribe now to Ctrl-Alt-Speech »
Techdirt Deals
Techdirt Insider Discord
The latest chatter on the Techdirt Insider Discord channel...
Loading...